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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide secure 
processing of client credentials used for Web-based 
access to resources. 

SOLUTION: A login page with an interface for entering 
user credentials is presented at a client and the entered 
user credentials are sent to a server. In response to 
receiving the user credentials, the server generates a 
unique session ID for the client. The server also derives 
a digital signature for the user credentials based on a 
current key in a rotating key store and the unique 
session ID. The server then encrypts the digital signature 
and the user credentials based on an encryption key 
derived from the current key and the unique session ID. 




When encrypted credentials are received back to the client, keys from the rotating key store 
are used to attempt to validate the credentials. If the user credentials can not be validated, a 
user is again presented with a login page. 
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